Privacy Policy

Effective: June 9, 2026

What CheckInBDA is used for

CheckInBDA helps Bermudian service businesses manage customer arrivals. Businesses use the service so customers can scan a QR code, check themselves in, and let staff know they have arrived.

CheckInBDA is intended for arrival management, front-desk visibility, staff notifications, account access, and support. It is not designed to be a medical record system, emergency intake system, or replacement for existing scheduling or clinical record systems.

Customer arrival data we may process

For customer check-ins, we may process a last name, the last four digits of a phone number, arrival time, served time, status, and related check-in details submitted by the customer or business.

If a business configures additional check-in fields, CheckInBDA may process the information submitted through those fields. Businesses are responsible for asking only for information needed to manage arrivals for their Bermudian operations.

Business and staff account data

For business accounts, we may process business name, account email, notification email, settings, billing or plan details, and authentication information.

We may also process staff user data, such as staff names, email addresses, roles, sign-in activity, and settings used to access the business dashboard. If a business or prospective business submits a request-access form, we may process the submitted contact details and business information so we can respond.

Technical and notification data

If email notifications or related add-ons are enabled, CheckInBDA may process the email addresses and notification details required to send those messages. We also process limited technical information, such as IP addresses and security logs, to operate, secure, troubleshoot, and protect the service.

How information is used

We use information to provide check-in notifications, show arrivals to the relevant business, manage staff access, support request-access follow-ups, secure the service, and support account operations. Arrival information is isolated by business and is not sold.

Who can access business check-ins

Customer arrival records are shown to the business account that collected them and to authorized staff users for that business. Businesses decide who on their team should have access to the dashboard and are responsible for keeping staff access appropriate and up to date.

Service operations

We use trusted technology vendors needed to run, secure, maintain, and support CheckInBDA. These vendors may process limited data needed to provide the service.

Arrival data retention

Customer arrival records are retained for 90 days for routine operations, unless a longer period is required to meet legal obligations or resolve a service, security, or billing issue. Operational records may be retained for as long as reasonably needed to operate and protect the service.

Business export and deletion requests

Businesses can contact CheckInBDA to request help with exporting or deleting business arrival data, subject to account verification, technical limits, legal obligations, security needs, and billing or dispute requirements.

Healthcare and sensitive information caution

CheckInBDA is for arrival management, not medical records. Businesses should not collect symptoms, diagnoses, treatment details, insurance numbers, emergency information, or other sensitive medical details through CheckInBDA.

Businesses control their own check-in fields and staff access. Businesses that use CheckInBDA in healthcare, wellness, or regulated settings in Bermuda are responsible for configuring the service appropriately for their own privacy and compliance obligations.

Contact

For privacy questions, access requests, export requests, or deletion requests, email privacy@checkinbda.com.